DNS hiccups

Alessandro Vesely vesely at tana.it
Tue Apr 15 16:03:56 UTC 2025


On Tue 15/Apr/2025 15:54:05 +0200 Stephane Bortzmeyer via bind-users wrote:
> On Tue, Apr 15, 2025 at 02:54:33PM +0200,
>   Alessandro Vesely <vesely at tana.it> wrote
>   a message of 46 lines which said:
> 
>> last night I sent 4 complaint messages to vodafone.com.  The first one bounced like so:
> 
> Note that the name servers for mail.protection.outlook.com (the target
> of the MX record) are quite broken, they return FORMERR for EDNS
> questions. It may create problems.
> 
> % dig   @ns2-proddns.glbdns.protection.outlook.com.  vodafone-com.mail.protection.outlook.com A
> 
> ; <<>> DiG 9.18.33-1~deb12u2-Debian <<>> @ns2-proddns.glbdns.protection.outlook.com. vodafone-com.mail.protection.outlook.com A
> ; (1 server found)
> ;; global options: +cmd
> ;; Got answer:
> ;; ->>HEADER<<- opcode: QUERY, status: FORMERR, id: 20571
> ;; flags: qr rd; QUERY: 0, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0
> ;; WARNING: recursion requested but not available
> 
> ;; WARNING: EDNS query returned status FORMERR - retry with '+noedns'
> 
> ;; Query time: 12 msec
> ;; SERVER: 104.47.72.81#53(ns2-proddns.glbdns.protection.outlook.com.) (UDP)
> ;; WHEN: Tue Apr 15 15:53:29 CEST 2025
> ;; MSG SIZE  rcvd: 12


Hm... so perhaps those were not timeouts but FORMERRs?  However, the other 
three messages, following at a few minutes apart, were sent all right.

My other concern is why I cannot understand it from the query log.


Many thanks, also to Sten and Michael.
Best
Ale
-- 








More information about the bind-users mailing list